| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost | ≥ 5.34.0, < 7.1.9≥ 7.2.0, < 7.8.4≥ 7.9.0, < 7.9.3 | 7.1.97.8.47.9.3 |
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free